setup-sso-ui-widget SKILL.md description exceeds 1024-char limit, fails to load

Open Beginner friendly
#177 2 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
1/5
Estimated time
Under an hour
Newbie friendliness
88/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Quiet
Tech stack
yaml
Domain
cli, tooling

Research direction

Open plugins/microsoft-365-agents-toolkit/skills/setup-sso-ui-widget/SKILL.md and inspect its YAML frontmatter description. Trim it below the Copilot CLI's 1024-character limit while preserving the stated trigger phrases and both widget-standard details, then verify the skill loads successfully in Copilot CLI.

Written by the indexing model from the issue text.

Description

Summary

plugins/microsoft-365-agents-toolkit/skills/setup-sso-ui-widget/SKILL.md fails to load in Copilot CLI with:

The following skills failed to load:
setup-sso-ui-widget\SKILL.md: Skill description must be at most 1024 characters

Cause

The YAML frontmatter description field in this SKILL.md is 1364 characters, exceeding the CLI's 1024-character limit for skill descriptions. This breaks the skill for every user of the microsoft-365-agents-toolkit plugin on current Copilot CLI versions.

Fix

Trim the description field to under 1024 characters while preserving the trigger phrases and both widget-standard (MCP Apps / OAI Apps) details. Example replacement (926 chars) that preserves intent:

description: > Adds Microsoft Entra SSO (no OBO) to a Microsoft 365 Copilot declarative agent whose tools are served by an MCP server — for both widget standards: (1) MCP Apps (create-mcp-app): a *_plugin.json with runtimes[] and an EXPRESS server; (2) OAI Apps (ui-widget-developer): appPackage/mcpPlugin.json and a raw-http server. Ambiguous layout defaults to MCP Apps. Auto-detects layout, reuses the existing devtunnel + env/.env.local, registers the Entra app
  + ATK OAuth (MicrosoftEntra), patches runtimes[] auth to OAuthPluginVault, injects a minimal
  JWKS bearer-token guard (Express middleware or raw-http guard, no rewrite), validates,
  sideloads, and prints an app-registration summary. Triggered by: "add sso to my mcp server",
  "wire entra sso for my copilot agent", "setup sso for mcp apps", "add sso after
  create-mcp-app", "add entra auth to my express mcp server", "configure only sso no obo"

Impact

Any user with this plugin installed sees the load failure on every CLI launch/plugin sync, since the file is re-synced from this repo and overwrites local workarounds.

Environment

• GitHub Copilot CLI v1.0.79 (Windows)
• Plugin: microsoft-365-agents-toolkit v1.3.1
• Source file SHA: 1e0663ebefe2088d0d32fad8440a55921cb2675c
Dominant language
PowerShell
Stars
1k
Forks
132
Avg merge
5d 19h
Merged PRs (30d)
6

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from microsoft/work-iq

All issues in microsoft/work-iq

Similar issues

More CLI issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.